Bounceback logout

From RavenWiki
Revision as of 15:49, 9 October 2006 by mjg17 (talk | contribs) (First version)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

My original request was:

I know that the recommened way to logout is to quit the browser. None-the-less it would be handy for my current project (which will be used during our undergrad registration) if my web application could force a Raven logout, before returning to its front page for the next customer.
Is there any chance of offering a 'bounce-back' logout page which will take as a parameter a URL (on the originating host) to which to return?

The application in question is run in a kiosk mode for self-service on-line registration.

Jon replied:

Clearly this _could_ be done. The problem in general is that such a feature will only log the user out of your application and the central Raven server. If that's all that they have authenticated to then that's fine. But in general people will have authenticated to multiple sites and will be left authenticated to all the rest, probably without realising. There is also the issue that, for example, 'protected' content may remain accessible via the browsers 'back' button if the browser is not reset. I'm not sure this is something I'd want to encourage.
There are several ways to provide a 'central logout', but they are all complicated and none can be 100% reliable.

None-the-less, others expressed interest in this feature for use under controlled circumstances.